Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2018-10902

It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status() which are part of snd_rawmidi_ioctl() handler in rawmidi.c file. A malicious local attacker could possibly use this for privilege escalation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: affected

  • 3.16.58 to < 3.16.*unaffected
  • 3.18.117 to < 3.18.*unaffected
  • 4.4.144 to < 4.4.*unaffected
  • 4.9.115 to < 4.9.*unaffected
  • 4.14.100 to < 4.14.*unaffected
  • 4.17.10 to < 4.17.*unaffected
  • 4.18 to < *unaffected

References